Slashdot videos: Now with more Slashdot!

View

Discuss

Share

We've improved Slashdot's video section; now you can view our video interviews, product close-ups and site visits with all the usual Slashdot options to comment, share, etc. No more walled garden! It's a work in progress -- we hope you'll check it out (Learn more about the recent updates).

Let me guess, no-one wanted to provide support for the authors ipad or his shadow infrastructure sitting under his desk on 3 year old unsupported equipment.

Some hints for the articles author

Provide a damned business case for the toys (yes, they are toys) and how they are going to improve efficiency/save costs for the organisation as a whole.
Hell if your business case is good Management and IT may agree to supply and roll out the toys.

An anonymous reader writes 'Volcanic activity may split the African continent in two, creating a new ocean, say experts. This is due to a recent geological crack which has appeared in northeastern Ethiopia.'

Proxy account wont stop DoS due to excessive lookups by a malicious person on systems configured to use the service on the local network. They will just be performed by the proxy user.

True you have extra potential for anybody from any host to perform lookups and abuse the server (generally the ldap servers are not public to world though), but in my deployments it has been a requirement for free internal access to the information provided.

With a good spread of hub or read-only consumers behind ldap proxies this can be alleviated somewhat.

In my experience the biggest DoS has been due to account lockout settings... but you get that regardless of authentication backend...

Dont use a proxy account for authentication from linux (you need the proxy account on solaris though so ldaps/tls works...).

Ensure that userpassword is readable by no-one (including the proxy user), and use pam_ldap for authentication.

On linux anonymous access is sufficent for NSS lookups, authentication is performed via pam_ldap, which performs an ldap bind as the user that is authenticating.
This also frees you to use any password storage scheme you want.

abe ferlman writes "Pittsburgh TV Station WPXI built a shiny new newsroom, but on their ribbon-cutting weekend their broadcast was forced out into the parking lot due to a Windows Update glitch. Reporters read the news off dead-tree media in front of a chain link fence while they waited for the update to finish."

Macthorpe writes "In a news story carried by Telegraph.co.uk, the High Court in the United Kingdom has ruled that Al Gore's famous feature-length film on global warming is a 'political film' and therefore can only be shown to school children with guidance notes to prevent political indoctrination. He reinforces this with 9 key points in the film where specific points of view are raised with little to no evidence to support them. From the article: "Judge Michael Burton ruled yesterday that errors had arisen "in the context of alarmism and exaggeration" in order to support Mr Gore's thesis on global warming [...] the judge ruled that the "apocalyptic vision" presented in the film was politically partisan and thus not an impartial scientific analysis of climate change."

frontierindia writes "The ABL will be the first combat aircraft relying entirely upon a directed energy device as a weapon. It is designed to use directed energy to destroy a ballistic missile target shortly after it is launched during its "boost phase" of flight when it is considered to be the most vulnerable. When operational, the ABL will be an integral part of a layered Ballistic Missile Defense System."Link to Original Source

Ecuadorian Anonymous Coward writes "Ecuador Tax Agency (SRI) Closes Microsoft Branch Offices For 7 Days. "We have twice requested balances, payment reports and complete tax information, but the company hasn't given it to us, so in accordance with our laws we have proceeded with the closure," the SRI official in charge of the proceeding said. Microsoft said it was a Human Mistake (since their software never fails;)"Link to Original Source